Re: [PATCH v3 20/35] x86/bugs: Define attack vectors

Borislav Petkov
2025-02-26T21:01:54Z

On Wed, Feb 26, 2025 at 12:14:53PM -0800, Pawan Gupta wrote:
> This is a bit ambiguous, mitigations=off,guest_host could be interpreted as
> disabling guest->host and enabling all others. Using attack vectors with
> both =on and =off seems unnecessary.

No, you'll have

mitigations=[global],[separate_vector(s)]

so global can be "on", "off", "auto" and the separate vector enables only that
specific one.

--
Regards/Gruss,
Boris.